Lucene search
China National Vulnerability DatabaseCNVD-2022-18525HistoryMar 11, 2022 - 12:00 a.m.
Shopware Licensing Issue Vulnerability
2022-03-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
0.001 Low
EPSS
Percentile
26.7%
Shopware is a suite of open source e-commerce software from the German company Shopware.Shopware suffers from an authorization issue vulnerability that stems from incorrect api routing checks. An attacker could exploit this vulnerability to modify customers and create orders without application privileges.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Shopware Shopware <6. | eq | 4.8.2 |
Related
cvelist
cvelist
CVE-2022-24748 Incorrect Authentication in shopware
2022-03-09 22:25:09
nvd
nvd
CVE-2022-24748
2022-03-09 23:15:08
cve
cve
CVE-2022-24748
2022-03-09 23:15:08
github
github
Incorrect Authentication in shopware
2022-03-10 18:02:14
veracode
veracode
Privilege Escalation
2022-03-10 03:50:45
osv
osv
CVE-2022-24748
2022-03-09 23:15:08
Incorrect Authentication in shopware
2022-03-10 18:02:14
prion
prion
Design/Logic Flaw
2022-03-09 23:15:00